$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6766991f-3a9a-3da2-b3ff-32bce56dea80.roa File: 6766991f-3a9a-3da2-b3ff-32bce56dea80.roa (raw, json) Hash identifier: qZuRxJaAwPW+nfXJRVtkZPuVAYDPHXnMQ7+ytHOE+ko= Subject key identifier: 42:CE:68:D5:9A:DC:45:B2:78:DC:03:3B:2D:D1:9B:29:B2:37:84:3B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D3C9A1591EA80E05F8C971100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6766991f-3a9a-3da2-b3ff-32bce56dea80.roa Signing time: Sat 21 Mar 2026 01:00:30 +0000 ROA not before: Sat 21 Mar 2026 01:00:30 +0000 ROA not after: Fri 19 Jun 2026 01:00:30 +0000 asID: 45326 IP address blocks: 38.240.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:9a:15:91:ea:80:e0:5f:8c:97:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 21 01:00:30 2026 GMT Not After : Jun 19 01:00:30 2026 GMT Subject: CN=753878a1-0563-4478-820e-bbcdbd8e1688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6c:70:01:1d:bb:a6:47:55:f4:06:dc:fd:77: 3a:49:b6:a9:b5:59:2d:e3:d0:ba:f3:e9:a8:5e:7c: 9b:05:fc:f3:a8:65:aa:c9:c0:bb:72:38:18:8a:1d: 91:9c:19:ed:86:b3:e5:83:b2:28:fc:d2:28:d9:ec: 4a:b2:30:27:95:db:a4:9a:28:1a:26:d5:9d:e1:7e: cb:31:19:5a:f3:4b:fe:22:1c:95:5c:f5:82:a5:4a: 71:a6:f3:22:67:40:e0:d5:8c:d2:b3:bc:e4:94:15: 0e:92:3c:32:4e:5e:d5:6d:0d:7c:68:d9:a1:f3:71: a3:af:13:98:39:3d:bf:60:84:8b:27:62:6b:a5:41: a2:a8:c5:16:ba:08:39:6b:fb:f2:f5:90:ca:4c:8b: 71:b4:da:28:e9:5f:5c:c7:19:00:56:e7:83:53:c4: 79:48:04:67:21:7d:40:41:19:cc:12:08:6f:23:3c: ed:bb:05:3c:97:e5:f4:73:b9:c0:d7:0a:7e:ef:98: 03:f6:2f:2d:96:6b:d1:86:3b:17:5f:9f:74:02:69: d9:f4:74:85:e9:e8:b0:5d:f8:54:c6:60:4d:a1:2d: 27:4c:29:e8:71:8f:5e:63:1d:00:26:12:75:bb:e6: 2e:f3:e4:9f:51:7d:22:72:a6:13:56:0d:53:1c:b2: c1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CE:68:D5:9A:DC:45:B2:78:DC:03:3B:2D:D1:9B:29:B2:37:84:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6766991f-3a9a-3da2-b3ff-32bce56dea80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.240.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1f:2e:8e:a9:2c:92:46:0c:51:95:c6:f0:4b:9c:bf:84:ba: a5:63:5b:f9:85:38:57:ec:87:ab:3b:b7:de:77:2b:16:0a:3f: b7:79:24:67:9b:a4:1b:96:bf:a2:ca:61:86:e3:7a:7e:21:75: 55:23:5d:7b:c3:3e:3a:ca:eb:d8:75:4d:bd:32:04:85:ac:ae: 2a:aa:61:ae:81:98:b3:2d:d1:7d:97:35:2b:80:f5:cb:17:a5: 02:ad:b5:40:67:80:5a:52:41:70:6c:fb:71:fd:ae:91:d8:66: 93:72:f9:ea:a2:cf:07:11:11:f6:de:44:1a:3c:6f:1f:a6:7f: de:a5:24:af:ef:e4:80:74:77:eb:a9:54:50:7d:77:ff:97:d6: e6:35:95:f9:00:fc:68:36:83:01:52:a6:52:45:28:4f:6c:85: 7e:5d:d8:42:f6:45:af:5b:8e:a0:f0:95:6e:66:af:b4:b7:4e: 31:e6:e8:d5:e9:6e:0c:b7:5e:14:60:20:af:ee:63:37:10:16: 13:43:04:a3:f6:7a:c4:54:ad:b9:7d:5f:3a:30:5e:20:81:eb: 78:da:9c:61:3d:dc:21:d3:4a:d1:3e:c1:a0:16:42:af:bd:86: 93:02:06:8f:c7:5e:97:e0:d6:34:3d:5e:8b:8d:7b:0c:4e:5f: fb:cc:e7:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE08mhWR6oDgX4yXEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyMTAxMDAzMFoXDTI2MDYxOTAxMDAzMFowLzEtMCsGA1UEAxMk NzUzODc4YTEtMDU2My00NDc4LTgyMGUtYmJjZGJkOGUxNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWxwAR27pkdV9Abc/Xc6SbaptVkt49C68+mo XnybBfzzqGWqycC7cjgYih2RnBnthrPlg7Io/NIo2exKsjAnldukmigaJtWd4X7L MRla80v+IhyVXPWCpUpxpvMiZ0Dg1YzSs7zklBUOkjwyTl7VbQ18aNmh83GjrxOY OT2/YISLJ2JrpUGiqMUWugg5a/vy9ZDKTItxtNoo6V9cxxkAVueDU8R5SARnIX1A QRnMEghvIzztuwU8l+X0c7nA1wp+75gD9i8tlmvRhjsXX590AmnZ9HSF6eiwXfhU xmBNoS0nTCnocY9eYx0AJhJ1u+Yu8+SfUX0icqYTVg1THLLBfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELOaNWa3EWyeNwDOy3RmymyN4Q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjc2Njk5MWYtM2E5YS0z ZGEyLWIzZmYtMzJiY2U1NmRlYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJvCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEfLo6pLJJGDFGVxvBLnL+EuqVjW/mFOFfsh6s7t953KxYKP7d5JGeb pBuWv6LKYYbjen4hdVUjXXvDPjrK69h1Tb0yBIWsriqqYa6BmLMt0X2XNSuA9csX pQKttUBngFpSQXBs+3H9rpHYZpNy+eqizwcREfbeRBo8bx+mf96lJK/v5IB0d+up VFB9d/+X1uY1lfkA/Gg2gwFSplJFKE9shX5d2EL2Ra9bjqDwlW5mr7S3TjHm6NXp bgy3XhRgIK/uYzcQFhNDBKP2esRUrbl9XzowXiCB63janGE93CHTStE+waAWQq+9 hpMCBo/HXpfg1jQ9XouNewxOX/vM548= -----END CERTIFICATE-----Generated at Thu Mar 26 00:37:00 2026 by rpki-client